vyos-documentation.git/docs/configuration, branch secure-boot-updates

Merge pull request #2340 from vyos/T9456-container-kernel-overlayfs

2026-10-17T06:16:09+00:00

container: T9453: explain migration to kernel overlayfs from fuse-overlayfs

Merge pull request #2334 from ruben-herold/docs-haproxy-http-server-close

2026-10-16T17:47:14+00:00

haproxy: document backend http-server-close

Merge pull request #2259 from vyos/T9354

2026-10-14T15:50:51+00:00

T9354: document "reconnect interface" operational command

docs: T8887: backfill Phase 1 commands from recent vyos-1x additions (#2134)

2026-10-13T12:40:47+00:00

* docs: T8887: backfill Phase 1 commands from recent vyos-1x additions Documents six CLI features added to vyos-1x between Nov 2025 and May 2026 that were missing from the docs (gap-audit T8886, Phase 1 / T8887): - policy route-map match source-peer (vyos-1x#5149, T8588) - high-availability vrrp snmp trap (vyos-1x#5108, T8448) - protocols segment-routing traffic-engineering subtree (vyos-1x#4994, T6750) - protocols bgp bmp target monitor pre-policy/post-policy/local-rib (vyos-1x#4922, T8133) - firewall global-options geoip provider/maxmind-* (vyos-1x#4949, T7926/T8049) - vpn ipsec childless IKE SA option (vyos-1x#4930, T8136) system frr watchfrr-timeout and service router-advert prefix base-interface are now documented on rolling via the page rewrites in vyos-documentation#2251 and vyos-documentation#2132. protocols bgp parameters as-notation is deferred: rolling carries it commented out; to be handled in a follow-up. 🤖 Generated by [robots](https://vyos.io) * docs: T8887: wrap pre-existing overlong lines in touched files - route-map, ipsec_general: wrap five pre-existing overlong lines so the doc linter (which scans whole modified files) passes on touched files 🤖 Generated by [robots](https://vyos.io) * docs: T8887: document BMP prerequisites and mandatory target address - state that set system frr bmp needs a commit plus a router reboot (or FRR restart) before BMP targets can be committed (protocols_bgp.py verify) - add target address (mandatory) and port (default 5000) commands and include the address in the example 🤖 Generated by [robots](https://vyos.io) * docs: T8887: state SR-TE segment-list commit requirements Per protocols_segment-routing.py verify(): a segment list needs at least one index; each index needs an MPLS label or a NAI; an adjacency NAI needs both source- and destination-identifier; a prefix identifier needs an algorithm; IS-IS/OSPF import, adjacency/prefix, IPv4/IPv6 and spf/strict-spf are mutually exclusive. Add a complete example. 🤖 Generated by [robots](https://vyos.io) * docs: T8887: escape placeholders in GeoIP and childless cfgcmd headers 🤖 Generated by [robots](https://vyos.io) * Apply suggestions from Liydmyla Co-authored-by: LiudmylaNad <235844477+LiudmylaNad@users.noreply.github.com> --------- Co-authored-by: Daniil Baturin Co-authored-by: LiudmylaNad <235844477+LiudmylaNad@users.noreply.github.com>

docs: Update IPv6 page to VyOS 1.5 standards (#2327)

2026-10-13T10:26:11+00:00

container: T9453: explain migration to kernel overlayfs from fuse-overlayfs

2026-10-11T07:34:37+00:00

openvpn: T9386: AEAD fallback ciphers can't be used with shared-secret-key

2026-10-09T13:41:29+00:00

Note that "encryption data-ciphers-fallback" only takes CBC ciphers together with "shared-secret-key".

router-advert: T9413: suppress linter on NAT64 well-known prefix examples

2026-10-07T22:28:10+00:00

The two nat64prefix examples use the well-known prefix 64:ff9b::/96, which the doc linter reports as outside the documentation ranges. Wrap them in stop/start_vyoslinter markers, as AGENTS.md describes for this prefix, so the page passes the linter.

router-advert: T9413: document no-remove-on-exit and no-flush-* options

2026-10-07T22:28:03+00:00

Document the three per-interface options added in vyos-1x for T9413, which keep radvd from sending zero-lifetime router, RDNSS and DNSSL advertisements on shutdown, and add an example of two routers sharing fe80::1 as the RA source address through VRRP.

Merge pull request #2324 from mandelbitdev/T9370-openvpn-chacha20poly1305

2026-10-07T18:05:14+00:00

openvpn: T9370: document the chacha20poly1305 data cipher